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Abstract. This paper illustrates a technique for specifying the detailed 
timing, logical operation, and compositional circuit design of digital cir- 
cuits in terms of ordinary state machines with output (transducers). The 
method is illustrated here with specifications of gates, latches, and other 
simple circuits and via the construction of devices starting with a SR 
latch built from gates and then moving on to more complex devices. 
Circuit timing and transients are treated in some detail. The method is 
based on "classical" automata and recursive functions on strings. No for- 
mal methods, extended state machines, or process algebras are involved 
but a reference is made to potential applications of the Krohn-Rhodes 
theorem and other group/monoid based algebraic techniques. 
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1 Introduction 

Both the time sensitive behavior and circuit architecture of digital circuits can 
be effectively modelled as ordinary state machines using recursive functions for 
specifications. This note starts with the example of logic gates and latches con- 
structed from cross-coupled gates, where timing and transient signals must be 
taken into account. Section [3] makes the case that the methods used in section 
actually are equivalent to ordinary automata. Section U carries us into proofs 
and more examples from simple digital circuit design. The focus in this paper 
is on the by-hand methods of specification and verification, but the methods 
described here seem to be well suited to automation. One of the goals of this 
work is to show that automata do not need to be extended or enhanced to 
capture properties of complex circuits. A final section discusses some possible 
implications involving semigroups. 

2 Basics 
2.1 Behavior 

Behavior should encompass the possibility of transient outputs and inputs, con- 
ditions that leave output undetermined, and "don't care" inputs and outputs. 
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The basic idea here is to model circuits as state machines with output, possibly 
state machines constructed as products of simpler state machines. The recursive 
function technique permits convenient specification of enormous state machines, 
state machines with parameters, and quite arbitrary interconnect. 

A state machine with output (a transducer) M can be treated as a map from 
sequences of inputs to output values with M(w) corresponding to the output of 
M in the state reached by following the sequence w from M's initial state. If 
we put M(A) — xo where A is the empty sequence, we have defined the initial 
state output of M — something that is usually unspecified in state machines 
modelling circuits. If we then put M(wa) — f(M(w), a) where wa is the sequence 
obtained by appending input a to sequence w, we have totally determined the 
input /output behavior of M. 

For state machines modelling circuits, inputs can be "samples" of the input 
signals applied to the input pins during the shortest interval of interest (time 
units may be picoseconds or microseconds or femtoseconds, depending on the 
devices being studied). A sample assigns signal levels to pins. To start, we can 
suppose signal levels are limited to {0, 1}. Samples are then maps Input Pins — > 
{0, 1} where the set of input pins depends on the device in question. Then 
Time(w) defined by Time(A) = and Time(wa) = l + Time(w) is a (not finite) 
state machine that simply counts the number of time intervals that passed since 
the initial state. But High(w,p) defined by High(A,p) — and High(wa,p) = 
(High(w,p) + 1) * a(p) tells us how long pin p has been kept high in consecutive 
preceding time intervals. 

Say that G is an OR gate with input pins P and propagation delay t only 
if High{w,p) > t for some p e P implies that G(w) = 1. There are an infinite 
number of state machines that satisfy this constraint — corresponding to the 
process variability of actual gates. 

Instead of defining Low to correspond to High, define a single function to 
see how long a pin has been held at a level. 

For b € {0, 1} and pin p 

H(A,p,b) = (1) 

, . ( H(w,p, b) + 1 if a(p) = b . . 

H(wa,p,b) = [ Q y oth ^ r ; ise (2) 

Or more compactly H(wa,p, b) = (H(w,p, b) + 1) * (1 — \a(p) — b\). 
A NAND gate can be specified as follows. 

Definition 21 N is a NAND-gate with propagation delay t > on pins P only 
if 

Whenever H(w,p, 0) > t for any p € P then N(w) = 1 (3) 

and 

Whenever H(w,p, 1) > t for all p E P then N(w) = (4) 
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The idea here is to minimally specify what we can expect from a gate and 
not constrain for example transient behavior unless we have some reason to be 
able to specify in more detail. 

Given a function /, let's have #/ count how long the output of / has been 
stable. 



So it's useful to note that if N meets the requirements for a NAND-gate 
with delay t then holding an input pin low for t + k time units causes output 
to be kept stable for at least k time units. This is a pretty obvious fact, but 
let's prove it just to show a style of recursion based proof that seems eminently 
automatable. 



Note that #N(w) > by definition. If H(w,p,0) < t then H(w,p,0) - (t + 
k) < so there is nothing to prove. But if H(w,p,0) > t then the NAND gate 
constraints require that N(w) = 1 and the rest follows by induction on w. For 
w = A there is nothing to prove since H(A,p, 0) = by definition. Suppose that 
H(wa,p, 0) > t. If H(wa,p, 0) = t then H(wa,p, 0) — (t + k) = and there is still 
nothing to prove since #N(w) > by definition. If H(wa,p, 0) > t then it must 
be that H(w,p,0) > t since by construction H(wa,p,0) — H(w,p,0) < 1. Thus 
N(w) = 1 and N(wa) = 1 so #7V(wa) = #N(w) + 1 and if #N(w) > H(w,p, 0) 
as assumed by recursion, the inequality must still hold in the wa state. 
I'll postpone multi-output circuits to section [4] 

2.2 Composition 

Now consider how two NAND-gates could be cross-coupled to create a latch. In 
this case, the inputs to the composite circuit induce inputs for the two component 
gates. Suppose that Ni and N2 are solutions to constraints [3] and |4] with input 
pins {1, 2}. We want to construct some L that contains copies of Ni and N 2 and 
that accepts input samples that are maps {set, reset} — »■ {0, 1}. When an input 
a is applied to L an input c\ will be generated for the copy of Ni and an input 
C2 for the copy of N 2 . Input c\(l) = a(reset) and input 02(1) = a(set) as the 
two inputs are connected directly to the input pins of the components. But Ci(2) 
will be set to the output of N 2 in the current state and 02(2) to the output of 
Ni in the current state. 



#f{A) = 



(5) 





For any k > 0[#A r (w) > H(w,p, 0) - (t + k)} 



(7) 



Input: w — > 



( 



Input:ui — > Machine :iVi — > Output:xi 
Input:zi2 — > Machine:.^ — > Output:x2 



) 



— > — > Output: (xi, x%) 



4 



feedback 4 



4 
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Define L(w) — (iVi(tti), -^2(^2)) where u\ and u 2 are the induced input 
sequences that are themselves functions of L and w. We need to define a mapping 
w M> (7/1,^2) and we do so recursively. Note that when w — A we must have 
ui = u 2 = A so that the components do not see any input until the composite 
system sees input. 

Definition 22 I is a constructed RS-Latch with base propagation delay t on 
pins {r, s} only if 

L(w) = (N 1 (u 1 ),N 2 (u 2 )) (8) 
where each Ni is a NAND-gate with delay t on pins{l,2} (9) 

w i-4 (ui,u 2 ) (10) 
and when w = A then w <— > (A, A) (11) 
and when w > (ui,u 2 ) then wa \-t (uiCi,u 2 c 2 ) (12) 
where ci(l) = a (reset), c x (2) = N 2 (u 2 ), c 2 (l) = a(se£),c 2 (2) = iVi(tti) (13) 

Define C(ui) = ATi(tti) to extract the q output from the latch. 



2.3 Abstraction 

Stepping back from the construction, consider an abstract behavioral specifica- 
tion of an RS-latch. 



latched(A,b,ttatch) = 0(14) 
latched(wa, b, ti atch ) (15) 
1 if b = 1 and H(wa, reset, 0) > ti atc h and H(wa, set, 1) > U atch 
or if b = and H(wa, reset, 1) > ti atc h and H(wa, set, 0) > t/ a t c /i 
or if a(set) — a(reset) = 1 and latched(w,b,ti atc h) > 
otherwise 

We want to say C is a SR-latch with delay tiatch if an d only if whenever 
latched(w,b, ti a tch) = 1 we must have C(w) = b. Without proof, if L is con- 
structed from NAND-gates of delay t as specified above, and C(w) — Ni{u\) 
then C is a RS-latch with delay it + 2. The +2 is an artifact of the model, which 
imposes a single time unit delay for a signal to propagate between the output 
and input of any connected component^ Of course, this is not a surprising fact, 



If that requirement is a problem the model can be adjusted. For example, we could 
require that for any circuit element E, E(wa) = E(wc) for any samples a and c — 
that is, there is at least one unit of delay between the application of a signal and 
a response. A sensible limitation in any case. Because the output does not depend 
on input, we can calculate the output using a dummy input. So for example make 
c be any appropriate sample and let, wa i-> (liiCi,U2C2) where 02(2) = N\(u\c) — 
eliminating the interconnect delay. 
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since engineers have been using latches since the 1950s and, by all indications, 
they work as intended. 

Just for fun, consider a NAND-gate constructed from 3 gates. Suppose Ni 
and -/V 2 and A 3 are all NAND-gates with delay t on pins {1,2,3} and we want to 
build a NAND gate with input pins {1,2,3,4,5,6,7} from them. Put N'(w) = 
(N 1 (u 1 ),N 2 (u 2 ),N 3 (u 3 )) and let AT (to) = N 3 (u 3 ). Define w i-> (A, A, A) when 
w = A. Then if w h-> (u\,u 2 ,u 3 ) define the mapping wa n> (u\C\, u 2 c 2 , u 3 c 3 ) 
where 

ci(l) =a(l),ci(2) = a(2),ci(3) = o(3) (16) 
c 2 (l) = a(4), ca(2) = a(5), c 2 (3) = a(6) (17) 
cs(l) = a(7), c 3 (2) - iVi(«i), cs(3) = JV 2 (u 2 ) (18) 

The glaring difference between A' and the constructed L is that the mapping 
from to to the ti, involves recursive feedback for L but not for N' . 

3 Background 
3.1 Representations 

We're representing state machines (transducers) with functions on strings. 

Correspondence between a transducer M and a string function /. 

Input:w => Machine:M => Outputs 
/(to) = a; 

A Moore machine or transducer is usually given by a 6-tuple 

M = (A, X, S, start, 8, 7) 

where A is the alphabet, A is a set of outputs, S is a set of states, start e S is the 
initial state, 8 : 5 x A — >• 5 is the transition function and 7 : 5 — > Ais the output 
function. While it is usual to limit Moore machines to finite state sets, and such 
finite state machines are sufficient to represent any constructable digital system, 
it's convenient to have infinite state machines available for specifications. For 
example, a hypothetical infinite counter may be useful in describing the periodic 
behavior of a finite state device. 

Given M, use primitive recursion on sequences to extend the transition func- 
tion 8 to A* by: 

S*(s,A) = s and 8*(s,wa) = 8(8*(s,w),a). (19) 

So 7 (8* (start, w)) is the output of M in the state reached by following w 
from M's initial state. Call /m(w) — 7 (8* (start, to)) the representing function 
of M. A representing function is "finite" if and only if it represents a finite state 
machine. 
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The transformation from string function to transducer is also simple. Given 
/ : A* — > X define f w (u) — f(wou) where o indicates string concatenation. 
Note that it is possible for w u but f w = f u meaning that f(w o z) — f(u o z) 
for all z £ A* . Intuitively f w — f u when both lead to the same state. Let Sf = 
{fw '■ w £ A*}.. Say / is finite if and only if Sf is finite. Define 8f(f w ,a) = f wa 
and define "f(f w ) — f w (A) = f(w). Then with start / = Ja we have a Moore 
machine 

M(f) = {Sf,startf,S f ^ f } 

and, by construction / is the representing function for M.(f). See section [5] for 
a short discussion of the next step of abstraction: the monoid induced by the 
state machine. 

Any Mi that has / as a representing function can differ from M\ = M(f) 
only in names of states and by including unreachable and/or duplicative states. 
That is, there may be some w so that 5* (start i,w) ^ 6 'jjj (start 2, w) but since 
fw — fw it must be the case that the states are identical in output and in the 
output of any states reachable from them. If we are using Moore machines to 
represent the behavior of digital systems, these differences are not particularly 
interesting and we can treat M(f) as the Moore machine represented by /. 

3.2 Products 

Gecseg[2] describes a general automata product suitable to composition of digital 
circuits that is used in a simplified way here and in a more general way in [5]. 

Suppose we have a collection of (not necessarily distinct) Moore machines 
Mi = (Ai, Xi, Si, starti,Si, Xi) for (0 < i < n) that are to be connected to con- 
struct a new machine with alphabet A using a connection map g. The intuition 
is that when an input a is applied to the system, the connection map computes 
an input for Mi from the input a and the outputs of the factors (feedback). 

Definition 31 General product of automata for digital circuits 

Given Mi — (Ai, Xi, Si, starti, &j,7j) and h and g where g(i,a,x) £ Ai, define 
the Moore machine: M — -4™ =1 [Mi, g, h) — (A, X, S, start, S, 7) 

- S — {(si . . . , s n ) : Si £ X;} and start = (starti . . . , start n ) 

- X = {h(xi . . . ,x n ) : Xi £ Xi} and j((si . . .,s n )) = h(yi(si) . . . ,j n (s n )). 

- 5((s 1 . . .,s n ),a) = (6i(s!,g(l,a,j(s))) . . . ,5 n (s n ,g(n,a,j(s)))). 

I'll state without proof a theorem proved elsewhere that should be reasonably 
obvious [5]. 

Theorem 1 If each fi represents Mi and f(w) — h(fi(u{) . . . , f n (u n )) 
and when w — A, m — A 

and if when «)4 (. . . ttj . . .), then wa 1— > (. . . UiCi . . .) where Ci = g(i, a, f(w)). 
and M = A™ =1 [Mi, h,g] then / represents M 
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4 More examples 

Let's step up the complexity of the examples to multi-output-pin circuits. In 
this case, we just add another parameter to select which output pin is being 
referenced. A single bit adder might output have output pins {sum, carry out \ 
{0, 1} and accept input samples {vl, v2, carry in }. 

D is a delay t adder iff and only if 
H(w, carry in ,b ) > t and H(w, vl, b\) > t and H (w, v2, 6 2 ) > t — > 



An n bit adder then has inputs that are maps from {carryin, vl\ . . . vl n , v2\ . . . v2 n } 
to {0, 1}. The output pins are {ri, . . .r n , c out ). In contrast to a gate, there are 
never "do not care" inputs. Define Last(wa) = a. Define Stable(A) — and 



Let Lastlnl(w) = (Last(w) (carryin), Last(w) (vli), . . . Last(w)(vl n )) and 
Lastln2(w) — (Last(w)(v2\), . . .Last(w)(v2 n )) Given a binary n-vector b = 
(&i, . . . b n ), define projection b[i] = bi and then unsigned(b) = Ef =l b[i] * 2 1 ^ 1 
assuming both that the lower indexed bits are the lower order bits and that the 
length of the vector is known. What we want of an n-bit adder V is that when 
inputs have been stable for long enough Stable(w) > t a dder- 

(*) unsigned(LastInl(w)+unsigned(LastIn2(w)) = Ul l =1 V(w,ri)2 t ~ 1 +2 n V(w, carry [ ou t) 

We can construct a ripple carry adder as follows. 

V is a constructed ripple carry adder with n bits if and only if 

V(w) = (D i(m, sum),. . .D n {u n , sum), D n {u n , carry out )) (21) 



and if w = A then w ^ (A, . . . A) (23) 
and if w i->- (u\ . . . , u n ) then 
(wa) n> (wiCi . . . , u n c n ) where 
ci(carry in ) = a(carry in ), c i+ i (carry in ) = A(«», carry out ) (24) 

d(vl) = a(vU), Cl (v2) = a(v2 t ) (25) 



If t is the delay for the component adders, then we want to require that 
Stable(n *t + n) should imply (*). I'm just going to present proof sketches since 
the idea should be clear and the main claim here is that these proofs should 
be reasonably easy to automate. I want to particularly show how component 
properties can be pushed up the composition ladder because if P(f(w)) tells us 
that f(w) has a property P and we can show it for all w, then P(f(m)) must be 



D(w, carry out ) = [(b + h + b 2 )/2\ (20) 
and D(w, sum) = (bo + b\ + b 2 ) mod 2 




if a = Last(w) 
otherwise. 



where each Di is a delay t single bit adder 



(22) 
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true. However, there are additional constraints on m because of the definition of 
the map from w to itj. 

Proofs are usually by induction: one strings and on the component index. 
First, there is a lemma for how long the output of an adder is stable when the 
input is held stable. Recall the definition of above in equation [6] and consider 
#D(w, sum). 

Ignoring the composite system, say that t delay adder D must have the 
property that: 

Stable(w) > t + k — > jj=D(w, sum) > k and #D{w, carry out ) > k (26) 

Note this w ranges over input sequences for single-bit adders - we'll turn to w 
for the n-bit adder below. Proof: Let w = A and there is nothing to prove since 
#D(A) — and Stable(A) = 0. Suppose the lemma true for w and consider wa. 
Suppose #D(w) — j and consider #D(wa) where we extend the #/ notation to 
allow for pin arguments. If k = then all we have to prove is that #D(w) > 
which is trivially true. So consider k > and Stable{wa) > t + k' + 1 for 
some k' > 0. Note that Stable(w) = j implies that H(w,p,b p ) > j for each 
input pin p for some value of b p . So by the definition of an adder the outputs 
of D are determined when Stable{w) > t + k. From the definition of H we 
have H(wa,p,b p ) < H(w,p,b p ) only when H(wa,p,b p ) = which we know 
is false (or else Stable(wa) — 0. So H(w,p,b p ) < H(wa,p,b p ) which means 
H(wa,p, bp) = 1 + H(w,p, b p ) so H(w,p, b p ) — t + k' and k! > so H(w 7 p) > t 
which means that the outputs at state w were determined by the inputs which 
have not changed by state wa. QED. 

Now switch back to the composite structure. By construction, H(w, vli, 61j) 
= H(ui, ul, bli) and H(w, u2j, b2i) — H(ui,v2,b2i) and H(w, carry &o) = 
H(ui, carryi n , bo). So by the lemma at [26l and the initial assumption #Di(u\) > 
(n — l)t + n since the inputs have been stable for n * t + n. Now we note that 
for i > 1, we must have #Z?j_i(uj_i) + 1 < H(ui, carry i n ,bi). The proof is by 
induction using the definition of the mapping from w to the U{. This tells us that 
the inputs for #Di(u%) > t + k + 1 — >• j^Di{ui) > k. The 1 gets lost because of 
the 1 unit delay between output pins and input pins - see the note above. At 
this point it's a matter of putting the parts together to complete the proof. 

5 Possible future directions 

One of the advantages of working with "vanilla" state machines is that they are 
fundamentally related to algebra — algebra in the sense of groups and monoids, 
not "algebra" in the sense of "process algebra" or even universal algebra. It's 
well known that every state machine induces a monoid, and there is a decompo- 
sition theory for state machines that parallels and extends group decomposition 
via the Jordon-Holder theorem. The researchers who first looked at algebraic 
automata theory were focused on so-called "cascade" products in which there is 
no feedback[ H4l3j . For example, the composed nand-gate above has no feedback 
between the u, — information moves in one direction only. The constructed SR 
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latch, on the other hand, requires that the output of N\(ui) be fed back into 
u 2 . The standard digital architecture distinction between combinational and se- 
quential circuits appears related to this distinction. 

Recall Sf the state set induced by / : A* — > X. Let Mon(f) be the monoid 
consisting of the set of maps <r w : Sf — >• Sf for w <E A* so that a w f u — f uow and 
the operation <t u <j z — <r uoz . The set of maps will be a superset of Sf because 
fw = fz does not imply that a w — a z since <r w f u — f uow which may be distinct 
from <j z f u — f U oz- But if Sf is finite then Mon(f) must be finite and certainly 
a a is the identity and 

The product used here was ignored by the pioneers of algebraic automata 
theory for a variety of reasons, but perhaps one of them was that the prac- 
titioner interest was in state minimization which leads naturally to questions 
of decomposition. The full generality of feedback products also loses the anal- 
ogy to the wreath products of the Jordon-Holder theorem that are key to the 
Krohn-Rhodcs decomposition. But the product used here is quite constrained. 
Each Ci(p) = a(p') or Ci(p) = Gj(uj,p') where d is a component factor be- 
cause the communication mimics the connection of wires so that no computation 
can be done in the connection map. There are additional constraints imposed 
by fan-out and fan-in limits and we may want more constraints such as the 
E(wa) — E(wa') constraint mentioned above that prevents instant response to 
inputs. We can conjecture that this constrained product also has structural im- 
plications for the construction of monoids. With the caution that what follows is 
extremely early conjecture let's look at some possibilities relating combinations 
versus sequence circuits to group structure. What we call combinatorial circuits 
in digital circuit engineering seems to produce state systems with only trivial 
loops - where/u, = f wa . This limits the complexity of subgroups within the un- 
derlying monoid. So products with non-trivial feedback may be the only ways 
to introduce longer loops into the state structure. 
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